All of lore.kernel.org
 help / color / mirror / Atom feed
* [OE-core][dunfell 00/38] Patch review
@ 2021-10-19 19:53 Steve Sakoman
  2021-10-19 19:53 ` [OE-core][dunfell 01/38] ffmpeg: Add fix for CVEs Steve Sakoman
                   ` (37 more replies)
  0 siblings, 38 replies; 40+ messages in thread
From: Steve Sakoman @ 2021-10-19 19:53 UTC (permalink / raw)
  To: openembedded-core

Please review this next set of changes for dunfell and have comments back by
end of day Thursday.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/2772

A few additional notes since this is a large patch set.

There are three groups of patches in this set:

 1. the normal bug fix patches from the mailing list and cherry-picks from master:
 
 gcc: fix missing dependencies for selftests
 libpsl: Add config knobs for runtime/builtin conversion choices
 patch.bbclass: when the patch fails show more info on the fatal error
 oeqa/selftest/sstatetests: fix typo ware -> were
 tar: filter CVEs using vendor name
 rng-tools: add systemd-udev-settle wants to service
 scriptutils.py: Add check before deleting path
 binutils: Fix a missing break in case statement
 oeqa/manual: Fix no longer valid URLs
 multilib: Avoid sysroot race issues when multilib enabled
 weston: Use systemd notify,
 e2fsprogs: upgrade 1.45.6 -> 1.45.7
 e2fsprogs: update to 1.45.6
 linux-yocto/5.4: update to v5.4.153
 linux-yocto/5.4: update to v5.4.150
 linux-yocto/5.4: update to v5.4.149
 ffmpeg: Add fix for CVEs

 2. Patches to enable dunfell on recent distros that have moved to glibc 2.34
 
 uninative: Upgrade to 3.3, support glibc 2.34
 uninative: Improve glob to handle glibc 2.34
 nativesdk-pseudo: Fix to work with glibc 2.34 systems
 pseudo: Update with fcntl and glibc 2.34 fixes
 pseudo: Fix to work with glibc 2.34 systems
 util-linux: disable raw
 gpgme: Use glibc provided closefrom API when available
 m4: Do not use SIGSTKSZ
 
 3. Patches to improve reproducible builds
 
 target/ssh.py: add HostKeyAlgorithms option to test commands
 python3: Add a fix for a make install race
 libnewt: Use python3targetconfig to fix reproducibility issue
 libxml2: Use python3targetconfig to fix reproducibility issue
 externalsrc: Fix a source date epoch race in reproducible builds
 externalsrc: Work with reproducible_build
 gobject-introspection: Don't write $HOME into scripts
 libtool: Allow libtool-cross to reproduce
 libtool: Fix lto option passing for reproducible builds
 util-linux: Fix reproducibility
 gnupg: Be deterministic about sendmail
 mesa: Ensure megadrivers runtime mappings are deterministic
 package: Ensure pclist files are deterministic and don't use full paths


The following changes since commit d12c44df66ca065a1526c7d6885e726cf50aab46:

  glew: Stop polluting /tmp during builds (2021-09-30 04:20:38 -1000)

are available in the Git repository at:

  git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Alexander Kanavin (1):
  e2fsprogs: update to 1.45.6

Alexandre Belloni (1):
  oeqa/selftest/sstatetests: fix typo ware -> were

Andrej Valek (1):
  libpsl: Add config knobs for runtime/builtin conversion choices

Bruce Ashfield (3):
  linux-yocto/5.4: update to v5.4.149
  linux-yocto/5.4: update to v5.4.150
  linux-yocto/5.4: update to v5.4.153

Chandana kalluri (1):
  scriptutils.py: Add check before deleting path

Christian Eggers (1):
  binutils: Fix a missing break in case statement

Claudius Heine (1):
  rng-tools: add systemd-udev-settle wants to service

Hongxu Jia (1):
  nativesdk-pseudo: Fix to work with glibc 2.34 systems

Jon Mason (1):
  oeqa/manual: Fix no longer valid URLs

Jose Quaresma (1):
  patch.bbclass: when the patch fails show more info on the fatal error

Khem Raj (2):
  m4: Do not use SIGSTKSZ
  gpgme: Use glibc provided closefrom API when available

Mark Hatle (1):
  externalsrc: Work with reproducible_build

Markus Volk (1):
  util-linux: disable raw

Michael Halstead (1):
  uninative: Upgrade to 3.3, support glibc 2.34

Pavel Zhukov (1):
  weston: Use systemd notify,

Ralph Siemsen (1):
  tar: filter CVEs using vendor name

Richard Purdie (13):
  multilib: Avoid sysroot race issues when multilib enabled
  pseudo: Fix to work with glibc 2.34 systems
  pseudo: Update with fcntl and glibc 2.34 fixes
  package: Ensure pclist files are deterministic and don't use full
    paths
  mesa: Ensure megadrivers runtime mappings are deterministic
  gnupg: Be deterministic about sendmail
  libtool: Fix lto option passing for reproducible builds
  libtool: Allow libtool-cross to reproduce
  gobject-introspection: Don't write $HOME into scripts
  externalsrc: Fix a source date epoch race in reproducible builds
  libxml2: Use python3targetconfig to fix reproducibility issue
  libnewt: Use python3targetconfig to fix reproducibility issue
  python3: Add a fix for a make install race

Ross Burton (1):
  uninative: Improve glob to handle glibc 2.34

Saloni (1):
  ffmpeg: Add fix for CVEs

Steve Sakoman (3):
  gcc: fix missing dependencies for selftests
  util-linux: Fix reproducibility
  target/ssh.py: add HostKeyAlgorithms option to test commands

Wang Mingyu (1):
  e2fsprogs: upgrade 1.45.6 -> 1.45.7

 meta/classes/externalsrc.bbclass              |  9 ++
 meta/classes/package.bbclass                  |  6 +-
 meta/classes/patch.bbclass                    |  7 +-
 meta/classes/uninative.bbclass                |  2 +-
 meta/conf/distro/include/yocto-uninative.inc  | 10 +--
 meta/conf/multilib.conf                       |  2 +
 meta/lib/oeqa/core/target/ssh.py              |  1 +
 meta/lib/oeqa/manual/eclipse-plugin.json      |  6 +-
 meta/lib/oeqa/selftest/cases/sstatetests.py   | 12 +--
 meta/recipes-core/libxml/libxml2_2.9.10.bb    |  2 +-
 meta/recipes-core/util-linux/util-linux.inc   |  7 +-
 ...-system-directories-when-cross-linki.patch | 26 +++---
 ...-t-try-to-rehash-a-deleted-directory.patch | 49 -----------
 ...ate_inode.c-set-dir-s-mode-correctly.patch | 41 ---------
 .../e2fsprogs/e2fsprogs/CVE-2019-5188.patch   | 57 -------------
 ...fix-use-after-free-in-calculate_tree.patch | 76 -----------------
 ...-missing-check-for-permission-denied.patch |  2 +-
 .../e2fsprogs/e2fsprogs/quiet-debugfs.patch   |  2 +-
 ...2fsprogs_1.45.4.bb => e2fsprogs_1.45.7.bb} |  6 +-
 meta/recipes-devtools/gcc/gcc-9.3.inc         |  1 +
 ...x-missing-dependencies-for-selftests.patch | 45 ++++++++++
 .../libtool/libtool-2.4.6.inc                 |  2 +
 .../libtool/libtool/lto-prefix.patch          | 22 +++++
 .../recipes-devtools/libtool/libtool_2.4.6.bb |  2 +-
 meta/recipes-devtools/m4/m4-1.4.18.inc        |  1 +
 .../m4/0001-c-stack-stop-using-SIGSTKSZ.patch | 84 +++++++++++++++++++
 .../pseudo/files/build-oldlibc                | 20 +++++
 .../pseudo/files/older-glibc-symbols.patch    | 57 +++++++++++++
 meta/recipes-devtools/pseudo/pseudo_git.bb    |  9 +-
 .../python/python3/makerace.patch             | 23 +++++
 .../recipes-devtools/python/python3_3.8.11.bb |  1 +
 meta/recipes-extended/newt/libnewt_0.52.21.bb |  2 +-
 meta/recipes-extended/tar/tar_1.32.bb         |  6 +-
 .../gobject-introspection_1.62.0.bb           |  2 +-
 meta/recipes-graphics/mesa/mesa.inc           |  2 +-
 .../wayland/weston-init/weston-start          | 12 +++
 .../wayland/weston-init/weston@.service       |  6 ++
 .../weston/systemd-notify.weston-start        |  9 ++
 .../wayland/weston/xwayland.weston-start      |  3 +-
 meta/recipes-graphics/wayland/weston_8.0.0.bb |  6 ++
 .../linux/linux-yocto-rt_5.4.bb               |  6 +-
 .../linux/linux-yocto-tiny_5.4.bb             |  8 +-
 meta/recipes-kernel/linux/linux-yocto_5.4.bb  | 22 ++---
 .../ffmpeg/ffmpeg/CVE-2021-3566.patch         | 61 ++++++++++++++
 .../ffmpeg/ffmpeg/CVE-2021-38291.patch        | 53 ++++++++++++
 .../recipes-multimedia/ffmpeg/ffmpeg_4.2.2.bb |  4 +-
 meta/recipes-support/gnupg/gnupg_2.2.27.bb    |  1 +
 ...se-closefrom-on-linux-and-glibc-2.34.patch | 24 ++++++
 meta/recipes-support/gpgme/gpgme_1.13.1.bb    |  3 +-
 meta/recipes-support/libpsl/libpsl_0.21.0.bb  |  7 +-
 .../rng-tools/rng-tools/rngd.service          |  1 +
 scripts/lib/scriptutils.py                    |  3 +-
 52 files changed, 529 insertions(+), 302 deletions(-)
 delete mode 100644 meta/recipes-devtools/e2fsprogs/e2fsprogs/0001-e2fsck-don-t-try-to-rehash-a-deleted-directory.patch
 delete mode 100644 meta/recipes-devtools/e2fsprogs/e2fsprogs/0001-misc-create_inode.c-set-dir-s-mode-correctly.patch
 delete mode 100644 meta/recipes-devtools/e2fsprogs/e2fsprogs/CVE-2019-5188.patch
 delete mode 100644 meta/recipes-devtools/e2fsprogs/e2fsprogs/e2fsck-fix-use-after-free-in-calculate_tree.patch
 rename meta/recipes-devtools/e2fsprogs/{e2fsprogs_1.45.4.bb => e2fsprogs_1.45.7.bb} (94%)
 create mode 100644 meta/recipes-devtools/gcc/gcc-9.3/0040-fix-missing-dependencies-for-selftests.patch
 create mode 100644 meta/recipes-devtools/libtool/libtool/lto-prefix.patch
 create mode 100644 meta/recipes-devtools/m4/m4/0001-c-stack-stop-using-SIGSTKSZ.patch
 create mode 100755 meta/recipes-devtools/pseudo/files/build-oldlibc
 create mode 100644 meta/recipes-devtools/pseudo/files/older-glibc-symbols.patch
 create mode 100644 meta/recipes-devtools/python/python3/makerace.patch
 create mode 100644 meta/recipes-graphics/wayland/weston/systemd-notify.weston-start
 create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2021-3566.patch
 create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2021-38291.patch
 create mode 100644 meta/recipes-support/gpgme/gpgme/0001-use-closefrom-on-linux-and-glibc-2.34.patch

-- 
2.25.1



^ permalink raw reply	[flat|nested] 40+ messages in thread
* [OE-core][dunfell 00/38] Patch review
@ 2021-03-13 18:48 Steve Sakoman
  0 siblings, 0 replies; 40+ messages in thread
From: Steve Sakoman @ 2021-03-13 18:48 UTC (permalink / raw)
  To: openembedded-core

Please review this next set of patches for dunfell and have comments back by
end of day Tuesday.

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/1962

The following changes since commit f5965d74822513e1edfc796b646e8a1ca2a50d65:

  yocto-uninative.inc: version 3.0 incorporate seccomp filter workaround (2021-03-08 06:42:30 -1000)

are available in the Git repository at:

  git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut

Bruce Ashfield (3):
  linux-yocto/5.4: update to v5.4.99
  linux-yocto/5.4: update to v5.4.101
  linux-yocto/5.4: update to v5.4.103

Charlie Davies (1):
  bitbake-bblayers/create: Fix incorrect priority help message

Chen Qi (2):
  python3-jinja2: set CVE_PRODUCT
  cups: use /run instead /var/run in systemd's unit file

Dorinda (7):
  meta/recipes-rt: Add HOMEPAGE / DESCRIPTION
  meta-skeleton: Add HOMEPAGE / DESCRIPTION
  meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
  meta/recipes-support: Add HOMEPAGE / DESCRIPTION
  meta/recipes-kernel: Add HOMEPAGE / DESCRIPTION
  meta/recipes-multimedia: Add HOMEPAGE / DESCRIPTION
  meta/recipes-graphics: Add HOMEPAGE / DESCRIPTION

Dorinda Bassey (1):
  meta/recipes-devtools: Add HOMEPAGE / DESCRIPTION

Florian Bezdeka (1):
  wic: Warn if an ext filesystem affected by the Y2038 problem is used

Jon Mason (1):
  runqemu: use "raw" instead of "bin" for ovmf

Khem Raj (3):
  oeqa/pam: Need shadow installed for the tests
  rxvt-unicode: Do not use throw specifications
  dtc: Fix array-bounds error

Meh Mbeh Ida Delphine (6):
  recipes-gnome: Add missing HOMEPAGE and DESCRIPTION for recipes
  recipes-graphics: Add missing HOMEPAGE and DESCRIPTION for recipes.
  recipes-kernel: Add missing HOMEPAGE and DESCRIPTION for recipes.
  recipes-multimedia: Add missing HOMEPAGE and DESCRIPTION for recipes.
  recipes-sato: Add missing HOMEPAGE and DESCRIPTION for recipes
  recipes-support: Add missing HOMEPAGE and DESCRIPTION for recipes

Minjae Kim (2):
  wpa-supplicant: fix CVE-2021-27803
  qemu: fix CVE-2021-20203

Purushottam Choudhary (1):
  shadow: whitelist CVE-2013-4235

Richard Purdie (6):
  libid3tag: Fix reproducibility issue
  syslinux: Fix reproducibility issues
  swig: Fix reproducibility issue
  efivar: Fix reproducibility issue
  selftest/reproducible: Add ability to pull some objects from sstate
  build-appliance-image: Drop kernel module handling

Ross Burton (2):
  ptest-packagelists: remove libinput-ptest
  insane: don't check for a warning string that is never output

Ulrich Ölmann (1):
  local.conf.sample: fix typo

Yi Fan Yu (1):
  valgrind: Increase timeout duration 30 -> 90 s

 .../baremetal-helloworld_git.bb               |  1 +
 .../recipes-kernel/hello-mod/hello-mod_0.1.bb |  1 +
 .../linux/linux-yocto-custom.bb               |  2 +-
 .../images/core-image-multilib-example.bb     |  3 +-
 .../recipes-skeleton/service/service_0.1.bb   |  1 +
 meta/classes/insane.bbclass                   | 22 +-----
 .../distro/include/ptest-packagelists.inc     |  1 +
 meta/conf/local.conf.sample                   |  2 +-
 meta/lib/bblayers/create.py                   |  2 +-
 meta/lib/oeqa/runtime/cases/pam.py            |  3 +
 meta/lib/oeqa/selftest/cases/reproducible.py  | 16 +++-
 .../efivar/efivar/determinism.patch           | 18 +++++
 meta/recipes-bsp/efivar/efivar_37.bb          |  1 +
 .../wpa-supplicant/CVE-2021-27803.patch       | 54 ++++++++++++++
 .../wpa-supplicant/wpa-supplicant_2.9.bb      |  1 +
 .../images/build-appliance-image_15.0.0.bb    |  8 +-
 .../python/python3-jinja2_2.11.2.bb           |  3 +
 .../python/python3-pygobject_3.34.0.bb        |  2 +
 .../python/python3-scons_3.1.2.bb             |  1 +
 meta/recipes-devtools/qemu/qemu.inc           |  1 +
 .../qemu/qemu/CVE-2021-20203.patch            | 74 +++++++++++++++++++
 .../swig/swig/determinism.patch               | 19 +++++
 meta/recipes-devtools/swig/swig_3.0.12.bb     |  1 +
 .../syslinux/syslinux/determinism.patch       | 22 ++++++
 .../syslinux/syslinux_6.04-pre2.bb            |  5 ++
 ...est-wrapper-to-support-PTEST-formats.patch |  9 ++-
 meta/recipes-extended/bash/bash.inc           |  1 +
 meta/recipes-extended/bc/bc_1.07.1.bb         |  1 +
 .../cracklib/cracklib_2.9.5.bb                |  3 +-
 meta/recipes-extended/cups/cups.inc           |  1 +
 .../cwautomacros/cwautomacros_20110201.bb     |  1 +
 meta/recipes-extended/ed/ed_1.15.bb           |  1 +
 meta/recipes-extended/grep/grep_3.4.bb        |  1 +
 .../libsolv/libsolv_0.7.10.bb                 |  1 +
 .../lighttpd/lighttpd_1.4.55.bb               |  1 +
 .../logrotate/logrotate_3.15.1.bb             |  3 +-
 meta/recipes-extended/lzip/lzip_1.21.bb       |  1 +
 meta/recipes-extended/man-db/man-db_2.9.0.bb  |  1 +
 meta/recipes-extended/mc/mc_4.8.23.bb         |  1 +
 meta/recipes-extended/mdadm/mdadm_4.1.bb      |  1 +
 .../mingetty/mingetty_1.08.bb                 |  1 +
 meta/recipes-extended/parted/parted_3.3.bb    |  1 +
 .../perl/libconvert-asn1-perl_0.27.bb         |  2 +
 .../perl/libtimedate-perl_2.30.bb             |  1 +
 meta/recipes-extended/quota/quota_4.05.bb     |  1 +
 meta/recipes-extended/sed/sed_4.8.bb          |  1 +
 meta/recipes-extended/shadow/shadow.inc       |  1 +
 meta/recipes-extended/shadow/shadow_4.8.1.bb  |  5 +-
 .../texinfo-dummy-native.bb                   |  1 +
 meta/recipes-extended/unzip/unzip_6.0.bb      |  1 +
 meta/recipes-extended/xinetd/xinetd_2.3.15.bb |  1 +
 meta/recipes-extended/xz/xz_5.2.4.bb          |  1 +
 meta/recipes-extended/zip/zip_3.0.bb          |  1 +
 .../recipes-gnome/epiphany/epiphany_3.34.4.bb |  3 +
 .../gnome/adwaita-icon-theme_3.34.3.bb        |  2 +
 .../libnotify/libnotify_0.7.8.bb              |  4 +
 .../libsecret/libsecret_0.20.1.bb             |  1 +
 .../clutter/clutter-gst-3.0.inc               |  4 +
 .../clutter/clutter-gtk-1.0.inc               |  5 ++
 meta/recipes-graphics/kmscube/kmscube_git.bb  |  6 +-
 .../mini-x-session/mini-x-session_0.1.bb      |  1 +
 meta/recipes-graphics/mx/mx.inc               |  6 ++
 meta/recipes-graphics/piglit/piglit_git.bb    |  2 +
 .../startup-notification_0.12.bb              |  5 +-
 .../ttf-fonts/ttf-bitstream-vera_1.10.bb      |  1 +
 .../vulkan/vulkan-headers_1.1.126.0.bb        |  4 +
 .../vulkan/vulkan-tools_1.1.126.0.bb          |  1 +
 meta/recipes-graphics/waffle/waffle_1.6.0.bb  |  8 +-
 .../pointercal-xinput_0.0.bb                  |  3 +
 meta/recipes-kernel/blktrace/blktrace_git.bb  |  5 ++
 meta/recipes-kernel/cryptodev/cryptodev.inc   |  5 ++
 .../dtc/0001-fdtdump-Fix-gcc11-warning.patch  | 35 +++++++++
 meta/recipes-kernel/dtc/dtc_1.6.0.bb          |  2 +
 .../kern-tools/kern-tools-native_git.bb       |  4 +
 .../linux-firmware/linux-firmware_20210208.bb |  4 +
 .../linux-libc-headers/linux-libc-headers.inc |  2 +
 .../linux/linux-yocto-rt_5.4.bb               |  6 +-
 .../linux/linux-yocto-tiny_5.4.bb             |  8 +-
 meta/recipes-kernel/linux/linux-yocto.inc     |  1 +
 meta/recipes-kernel/linux/linux-yocto_5.4.bb  | 22 +++---
 .../lttng/lttng-modules_2.11.6.bb             |  1 +
 .../lttng/lttng-tools_2.11.5.bb               |  1 +
 .../make-mod-scripts/make-mod-scripts_1.0.bb  |  1 +
 .../systemtap/systemtap-uprobes_git.bb        |  2 +-
 .../recipes-kernel/systemtap/systemtap_git.bb |  3 +
 .../alsa/alsa-lib_1.2.1.2.bb                  |  2 +
 .../alsa/alsa-plugins_1.2.1.bb                |  3 +
 .../alsa/alsa-tools_1.1.7.bb                  |  3 +
 .../alsa/alsa-topology-conf_1.2.1.bb          |  3 +
 .../alsa/alsa-ucm-conf_1.2.1.2.bb             |  3 +
 .../alsa/alsa-utils_1.2.1.bb                  |  2 +
 .../gstreamer/gst-examples_1.16.0.bb          |  3 +
 .../gstreamer/gstreamer1.0-libav_1.16.3.bb    |  2 +
 .../gstreamer/gstreamer1.0-omx_1.16.3.bb      |  1 +
 .../gstreamer1.0-plugins-bad_1.16.3.bb        |  4 +
 .../gstreamer1.0-plugins-base_1.16.3.bb       |  3 +
 .../gstreamer1.0-plugins-good_1.16.3.bb       |  4 +
 .../gstreamer1.0-plugins-ugly_1.16.3.bb       |  4 +
 .../gstreamer/gstreamer1.0-python_1.16.3.bb   |  2 +
 .../gstreamer/gstreamer1.0-vaapi_1.16.3.bb    |  1 +
 meta/recipes-multimedia/lame/lame_3.100.bb    |  3 +-
 .../recipes-multimedia/liba52/liba52_0.7.4.bb |  3 +
 .../libid3tag/libid3tag/cflags_filter.patch   | 21 ++++++
 .../libid3tag/libid3tag_0.15.1b.bb            |  1 +
 .../libpng/libpng_1.6.37.bb                   |  3 +
 .../libsamplerate/libsamplerate0_0.1.9.bb     |  1 +
 .../libsndfile/libsndfile1_1.0.28.bb          |  3 +
 meta/recipes-multimedia/libtiff/tiff_4.1.0.bb |  4 +
 .../mpeg2dec/mpeg2dec_0.5.1.bb                |  6 +-
 .../pulseaudio/pulseaudio.inc                 |  2 +
 meta/recipes-rt/rt-tests/rt-tests_1.1.bb      |  3 +-
 .../images/core-image-sato-dev.bb             |  1 +
 .../images/core-image-sato-ptest-fast.bb      |  1 +
 .../images/core-image-sato-sdk-ptest.bb       |  1 +
 .../images/core-image-sato-sdk.bb             |  1 +
 meta/recipes-sato/images/core-image-sato.bb   |  1 +
 meta/recipes-sato/l3afpad/l3afpad_git.bb      |  4 +
 .../matchbox-desktop/matchbox-desktop_2.2.bb  |  1 +
 .../matchbox-keyboard_0.1.1.bb                |  1 +
 .../matchbox-panel-2/matchbox-panel-2_2.11.bb |  2 +
 .../packagegroup-core-x11-sato.bb             |  2 +
 meta/recipes-sato/pcmanfm/pcmanfm_1.3.1.bb    |  1 +
 meta/recipes-sato/puzzles/puzzles_git.bb      |  1 +
 .../rxvt-unicode/rxvt-unicode.inc             |  1 +
 ...emove-deprecated-throw-specification.patch | 30 ++++++++
 .../rxvt-unicode/rxvt-unicode_9.22.bb         |  4 +-
 meta/recipes-support/apr/apr_1.7.0.bb         |  8 +-
 .../argp-standalone/argp-standalone_1.3.bb    |  1 +
 meta/recipes-support/aspell/aspell_0.60.8.bb  | 13 +++-
 .../recipes-support/atk/at-spi2-atk_2.34.1.bb |  2 +
 .../atk/at-spi2-core_2.34.0.bb                |  6 +-
 meta/recipes-support/atk/atk_2.34.1.bb        |  1 +
 meta/recipes-support/attr/acl_2.2.53.bb       |  5 +-
 meta/recipes-support/attr/attr.inc            |  6 +-
 .../bash-completion/bash-completion_2.10.bb   |  7 +-
 meta/recipes-support/boost/boost.inc          |  4 +
 .../consolekit/consolekit_0.4.6.bb            |  2 +
 meta/recipes-support/curl/curl_7.69.1.bb      |  4 +
 meta/recipes-support/db/db_5.3.28.bb          |  1 +
 .../debianutils/debianutils_4.9.1.bb          |  5 ++
 .../diffoscope/diffoscope_136.bb              |  5 ++
 .../recipes-support/enchant/enchant2_2.2.8.bb |  3 +
 meta/recipes-support/fribidi/fribidi_1.0.9.bb |  6 ++
 meta/recipes-support/gdbm/gdbm_1.18.1.bb      |  3 +
 .../gnome-desktop-testing_2018.1.bb           |  4 +
 meta/recipes-support/gnupg/gnupg_2.2.20.bb    |  5 ++
 meta/recipes-support/gnutls/gnutls_3.6.14.bb  |  4 +-
 .../recipes-support/gnutls/libtasn1_4.16.0.bb |  2 +
 .../iso-codes/iso-codes_4.4.bb                |  3 +
 meta/recipes-support/itstool/itstool_2.0.6.bb |  4 +
 .../libassuan/libassuan_2.5.3.bb              |  3 +
 .../libatomic-ops/libatomic-ops_7.6.10.bb     |  1 +
 meta/recipes-support/libcap/libcap_2.32.bb    |  4 +-
 .../libcheck/libcheck_0.14.0.bb               |  5 ++
 .../libcroco/libcroco_0.6.13.bb               |  3 +
 .../libdaemon/libdaemon_0.14.bb               |  4 +
 .../libevdev/libevdev_1.8.0.bb                |  3 +
 .../libevent/libevent_2.1.11.bb               |  5 ++
 .../recipes-support/libexif/libexif_0.6.22.bb |  3 +
 .../libfm/libfm-extra_1.3.1.bb                |  1 +
 meta/recipes-support/libfm/libfm_1.3.1.bb     |  2 +
 .../libgcrypt/libgcrypt_1.8.5.bb              |  3 +
 .../libgpg-error/libgpg-error_1.37.bb         |  1 +
 meta/recipes-support/libical/libical_3.0.7.bb |  4 +
 meta/recipes-support/libksba/libksba_1.3.5.bb |  5 ++
 meta/recipes-support/libnl/libnl_3.5.0.bb     |  5 ++
 .../libproxy/libproxy_0.4.15.bb               |  4 +
 meta/recipes-support/libpsl/libpsl_0.21.0.bb  |  6 ++
 .../libsoup/libsoup-2.4_2.68.4.bb             |  2 +
 .../recipes-support/liburcu/liburcu_0.11.1.bb |  3 +
 meta/recipes-support/libusb/libusb1_1.0.22.bb |  2 +
 .../recipes-support/libxslt/libxslt_1.1.34.bb |  5 ++
 meta/recipes-support/lz4/lz4_1.9.2.bb         |  1 +
 meta/recipes-support/lzo/lzo_2.10.bb          |  2 +
 meta/recipes-support/lzop/lzop_1.04.bb        |  1 +
 meta/recipes-support/mpfr/mpfr_4.0.2.bb       |  1 +
 meta/recipes-support/nettle/nettle_3.5.1.bb   |  1 +
 meta/recipes-support/npth/npth_1.6.bb         |  1 +
 .../p11-kit/p11-kit_0.23.22.bb                |  2 +
 meta/recipes-support/popt/popt_1.16.bb        |  1 +
 meta/recipes-support/re2c/re2c_1.0.1.bb       |  4 +-
 meta/recipes-support/serf/serf_1.3.9.bb       |  5 ++
 .../shared-mime-info/shared-mime-info_git.bb  |  1 +
 meta/recipes-support/sqlite/sqlite3.inc       |  1 +
 meta/recipes-support/taglib/taglib_1.11.1.bb  |  1 +
 meta/recipes-support/vim/vim.inc              |  4 +
 meta/recipes-support/vte/vte_0.58.3.bb        |  2 +
 scripts/lib/wic/canned-wks/common.wks.inc     |  2 +-
 scripts/lib/wic/canned-wks/directdisk-gpt.wks |  2 +-
 scripts/lib/wic/canned-wks/mkefidisk.wks      |  2 +-
 scripts/lib/wic/misc.py                       |  1 +
 scripts/lib/wic/partition.py                  | 38 ++++++++++
 scripts/runqemu                               |  2 +
 193 files changed, 772 insertions(+), 90 deletions(-)
 create mode 100644 meta/recipes-bsp/efivar/efivar/determinism.patch
 create mode 100644 meta/recipes-connectivity/wpa-supplicant/wpa-supplicant/CVE-2021-27803.patch
 create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2021-20203.patch
 create mode 100644 meta/recipes-devtools/swig/swig/determinism.patch
 create mode 100644 meta/recipes-devtools/syslinux/syslinux/determinism.patch
 create mode 100644 meta/recipes-kernel/dtc/dtc/0001-fdtdump-Fix-gcc11-warning.patch
 create mode 100644 meta/recipes-multimedia/libid3tag/libid3tag/cflags_filter.patch
 create mode 100644 meta/recipes-sato/rxvt-unicode/rxvt-unicode/0001-libev-remove-deprecated-throw-specification.patch

-- 
2.25.1


^ permalink raw reply	[flat|nested] 40+ messages in thread

end of thread, other threads:[~2021-10-19 19:55 UTC | newest]

Thread overview: 40+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-10-19 19:53 [OE-core][dunfell 00/38] Patch review Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 01/38] ffmpeg: Add fix for CVEs Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 02/38] linux-yocto/5.4: update to v5.4.149 Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 03/38] linux-yocto/5.4: update to v5.4.150 Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 04/38] linux-yocto/5.4: update to v5.4.153 Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 05/38] e2fsprogs: update to 1.45.6 Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 06/38] e2fsprogs: upgrade 1.45.6 -> 1.45.7 Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 07/38] weston: Use systemd notify, Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 08/38] multilib: Avoid sysroot race issues when multilib enabled Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 09/38] oeqa/manual: Fix no longer valid URLs Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 10/38] binutils: Fix a missing break in case statement Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 11/38] scriptutils.py: Add check before deleting path Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 12/38] rng-tools: add systemd-udev-settle wants to service Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 13/38] tar: filter CVEs using vendor name Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 14/38] oeqa/selftest/sstatetests: fix typo ware -> were Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 15/38] patch.bbclass: when the patch fails show more info on the fatal error Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 16/38] libpsl: Add config knobs for runtime/builtin conversion choices Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 17/38] gcc: fix missing dependencies for selftests Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 18/38] m4: Do not use SIGSTKSZ Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 19/38] gpgme: Use glibc provided closefrom API when available Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 20/38] util-linux: disable raw Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 21/38] pseudo: Fix to work with glibc 2.34 systems Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 22/38] pseudo: Update with fcntl and glibc 2.34 fixes Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 23/38] nativesdk-pseudo: Fix to work with glibc 2.34 systems Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 24/38] uninative: Improve glob to handle glibc 2.34 Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 25/38] uninative: Upgrade to 3.3, support " Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 26/38] package: Ensure pclist files are deterministic and don't use full paths Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 27/38] mesa: Ensure megadrivers runtime mappings are deterministic Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 28/38] gnupg: Be deterministic about sendmail Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 29/38] util-linux: Fix reproducibility Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 30/38] libtool: Fix lto option passing for reproducible builds Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 31/38] libtool: Allow libtool-cross to reproduce Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 32/38] gobject-introspection: Don't write $HOME into scripts Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 33/38] externalsrc: Work with reproducible_build Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 34/38] externalsrc: Fix a source date epoch race in reproducible builds Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 35/38] libxml2: Use python3targetconfig to fix reproducibility issue Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 36/38] libnewt: " Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 37/38] python3: Add a fix for a make install race Steve Sakoman
2021-10-19 19:53 ` [OE-core][dunfell 38/38] target/ssh.py: add HostKeyAlgorithms option to test commands Steve Sakoman
  -- strict thread matches above, loose matches on Subject: below --
2021-03-13 18:48 [OE-core][dunfell 00/38] Patch review Steve Sakoman

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.